Privacy Policy

This is the website of Criminal Records, an independent music project. It has no accounts, no forms, no shop and no mailing list. By default it sets no cookies and collects nothing that identifies you. Optional analytics run only if you accept them, and they use no cookies and do not follow you around the internet.

1. Who is responsible for your data

This site is operated by Criminal Records, an independent music project. Under UK GDPR and EU GDPR, Criminal Records is the “controller” of the personal data described below.

For anything in this policy, including any request about your data, write to wanted@criminalrecs.com.

2. What this site collects

Nothing, unless one of the following applies.

a. Server and security logs

When you load a page, our hosting and security provider (Cloudflare) automatically processes technical information including your IP address, the page requested, your browser type and the time of the request. Every website does this; it is how the page reaches you and how the site is protected from attacks and abuse. We do not build profiles from it and we do not use it to identify individual visitors.

Legal basis: legitimate interests (Art. 6(1)(f)) — operating and securing the site. Retention: held briefly by Cloudflare under their own retention rules.

b. Optional analytics

If — and only if — you press Accept on the cookie notice, we load Cloudflare Web Analytics. It counts page views and records the referring page and general country. It sets no cookies, does not fingerprint your device, and does not track you across other websites. It is not loaded at all before you accept, and rejecting costs you nothing: the site behaves identically.

Legal basis: consent (Art. 6(1)(a)). Withdraw it any time via Cookie settings at the bottom of any page.

c. If you email us

If you write to us we will have your email address and whatever you put in the message. We use it to reply to you and for nothing else. We do not add you to any list.

Legal basis: legitimate interests (Art. 6(1)(f)) — responding to correspondence. Retention: kept while the conversation is live and a reasonable period after, then deleted.

3. What this site does not do

• No advertising, ad networks or advertising cookies.
• No tracking pixels — no Google Analytics, no Meta pixel, no TikTok pixel.
• No newsletter, mailing list, contact form, accounts or logins.
• No selling or sharing of personal data with anyone for their own purposes.
• No third-party fonts, images, scripts or embeds. The typeface is served from this domain, so loading a page tells no other company that you were here. The only exception is the optional analytics above, which loads only after you accept.

4. Third parties

Cloudflare, Inc.

Provides hosting, content delivery, security and — with your consent — analytics. Cloudflare acts as our processor. It is US-based and runs a global network, so data may be processed outside the UK and EEA. Those transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. See Cloudflare’s privacy policy.

Links to YouTube and Instagram

The buttons on this site are ordinary links, not embeds. Nothing is loaded from those companies while you are here and they learn nothing about you unless you click through. Once you do, their privacy policies apply instead of this one.

5. Your rights

Under UK and EU GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, provide it in a portable format, or withdraw your consent. There is no charge and we will respond within one month.

Email wanted@criminalrecs.com. Because this site holds essentially nothing about visitors, in most cases the honest answer to an access request will be that we hold no data about you at all.

6. Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a regulator:

• UK: the Information Commissioner’s Office — ico.org.uk
• EU: your national data protection authority — list at edpb.europa.eu

7. Children

This site is not directed at children and does not knowingly collect data from anyone under 13.

8. Changes

If this policy changes, the date at the top changes with it. Anything significant will be flagged on the site.